Staging Environment: Content and features may be unstable or change without notice.

Advisory Package Curation

CVE-2022-3146

Progress 0 / 0

Advisory Summaries

github_osv/GHSA-w4x6-6w3r-9h2m

tripleo-ansible may disclose important configuration details from an OpenStack deployment A flaw was found in tripleo-ansible. Due to an insecure default configuration, the permissions of a sensitive file are not sufficiently restricted. This flaw allows a local attacker to use brute force to explore the relevant directory and discover the file. This issue leads to information disclosure of important configuration details from the OpenStack deployment.

gitlab/pypi/tripleo-ansible/CVE-2022-3146

tripleo-ansible may disclose important configuration details from an OpenStack deployment A flaw was found in tripleo-ansible. Due to an insecure default configuration, the permissions of a sensitive file are not sufficiently restricted. This flaw allows a local attacker to use brute force to explore the relevant directory and discover the file. This issue leads to information disclosure of important configuration details from the OpenStack deployment.

pypa/tripleo-ansible/PYSEC-2026-1052

tripleo-ansible may disclose important configuration details from an OpenStack deployment A flaw was found in tripleo-ansible. Due to an insecure default configuration, the permissions of a sensitive file are not sufficiently restricted. This flaw allows a local attacker to use brute force to explore the relevant directory and discover the file. This issue leads to information disclosure of important configuration details from the OpenStack deployment.

pysec/PYSEC-2026-1052

tripleo-ansible may disclose important configuration details from an OpenStack deployment A flaw was found in tripleo-ansible. Due to an insecure default configuration, the permissions of a sensitive file are not sufficiently restricted. This flaw allows a local attacker to use brute force to explore the relevant directory and discover the file. This issue leads to information disclosure of important configuration details from the OpenStack deployment.